Join Deloitte Touche Tohmatsu India LLP as a Security Platform Engineer in Delhi. This role is key to our Cyber Defense & Response team, focusing on building and enhancing robust security platforms. You will help organizations strengthen their defenses against cyber threats, ensuring resilience and protecting critical assets. We aim to embed security seamlessly into strategic development to effectively manage information and technology risks, empowering new opportunities through proactive cyber risk management.

Your responsibilities will include assessing current secrets management and Identity and Access Management (IAM) practices across diverse environments like Azure, AWS, on-premises, Kubernetes, and CI/CD pipelines. You will design target-state architectures, develop enterprise standards for secrets storage and access, and define strategies for utilizing centralized versus cloud-native tools. A significant part of the role involves designing IAM access models using Azure Entra ID and AWS IAM, supporting application teams in migrating to secure practices, and integrating secrets management with various security and operational tools. You will also establish operating model components, including ownership, support processes, governance, and reporting, while producing comprehensive documentation and implementation guides for engineering teams.

We require hands-on experience with Azure and AWS IAM services, including Entra ID, Managed Identities, service principals, and OIDC. Proficiency in at least two secrets management technologies such as Azure Key Vault, AWS Secrets Manager, or HashiCorp Vault is essential. Strong IAM knowledge across Azure Entra ID, AWS IAM, workload identity, federation, and least-privilege access is mandatory. Experience with CyberArk PAM, HashiCorp Vault Enterprise, machine identity, or certificate lifecycle management is highly desirable. A Bachelor's or Master's degree in Computer Science with 10-15 years of relevant experience is expected. Proven experience in enterprise transformations within secrets management, IAM, or cloud security is crucial. Strong understanding of IAM concepts, experience in hybrid environments, and the ability to integrate controls with CI/CD tools are also key. Excellent stakeholder management skills and experience in regulated industries are advantageous. Familiarity with policy-as-code tools and secret scanning/remediation tools will further strengthen your application.